Creating a World Class
IP VPN to Optimise
Enterprise Application
Performance
Successful deployment of your enterprise
applications is contingent upon the intelligence
of your IP network infrastructure.
IP VPN: The Critical Foundation for the Deployment of Enterprise Software
To gain or maintain a competitive edge in today’s global business world, multinationals are
deploying Internet Protocol Virtual Private Networks (IP VPNs) to support their enterprise
applications and strategic business initiatives at an unprecedented rate. IP VPNs operating
over both public and private networks can support enterprise applications for business
trans-actions that range from customer intertrans-actions to those involving partners and suppliers. With
today’s IP VPN technology and fully managed services, multinationals now have the key to
globalising their business operations in a fast, effective and high performance way.
Enterprise applications, including enterprise resource planning (ERP), supply chain
management (SCM), customer relationship management (CRM), as well as Web-based
and multimedia applications (voice and video), place high demands on many corporate
wide area network (WAN) infrastructures. Successful multinationals understand that
an efficient network is key to global distributed processing and access.
Application Centric Network Intelligence
Chief Information Officers (CIOs) and IT departments know that even small improvements in network performance yield a high return on investment (ROI) on their enterprise application expenditures. With that in mind, it makes sense to factor in the impact these applications will have on the WAN much earlier in the implementation process — and to select a network service provider and partner that will give your business the competitive edge to succeed in today’s global economy.
S e l e c t i n g t h e R i g h t N e t w o r k f o r Yo u r
C r i t i c a l E n t e r p r i s e A p p l i c a t i o n s
Selecting a secure, high-performance network to support your global enterprise application deployment starts with accurately assessing your business processes and goals. Which applications, protocols and traffic flow does your net-work need to support? Who are your "users" (employees, business partners, customers, other applications)? What are your key business functions and goals (i.e. reducing time-to-market, communicating with business partners, executing transactions or globalising business operations)? What are the optimal operating conditions required for your mission-critical enterprise applications? What are the critical applications needed to support these goals — and are they allocated the appropriate priority on your network? Increasingly, multinationals are relying on the flexibility, cost effectiveness and ease of management that IP VPNs offer.
W h y I P V P N ?
A virtual private network (VPN) is an enterprise network deployed on shared infrastructures that employs the same security, management and performance policies applied in a private network. VPNs can be implemented using tech-nologies such as frame relay and asynchronous transfer mode (ATM) or leased lines, all of which offer predictable performance and a high level of security. IP VPNs are private networks implemented over either the public Internet backbone or a service provider’s private IP backbone, making use of shared IP facilities to build an enterprise’s private WAN. IP offers any-to-any connectivity without having to procure additional permanent virtual circuits (PVCs) thus reducing complexity and simplifying administration. In addition, private IP VPNs offer the secu-rity and predictable performance of private networks while adhering to the protocol standards of the Internet. Both private and public network IP VPNs offer the cost effective-ness of a shared network, along with network management and the cost savings that result from the convergence of data, voice, and video over one network. For secondary corporate sites that only require casual use of enterprise applications, an IP VPN based on the public Internet pro-vides cost-effective connectivity. Both public and private networks can take advantage of the ubiquitous coverage of the Internet to provide the global reach demanded by multinationals.
Selecting an IP VPN to Maximise Return on Your
Enterprise Application Investment
The most important factor in selecting an IP VPN is finding a network that reflects the
business processes and objectives you have identified for your enterprise applications.
This requires a network with enough intelligence to distinguish between mission-critical
Application prioritised network
Reduced total cost of ownership
With traditional IP VPN services, bandwidth for each application is consumed on a first-come, first-serve basis. However, the most sophisticated IP VPNs offer class of service (CoS) capabilities that enable you to assign different priority levels to specific applications in order to differentiate priority enter-prise applications (voice, video, ERP, SCM and CRM) from non mission-critical applications (FTP, email and Web browsing).
A higher priority level assigned to mission-critical applications ensures optimum network operations. Being unable to differentiate between business mission-critical applications from non mission-critical applications will adversely impact a network. Without CoS, enterprise applications compete with bandwidth-hungry applications like file transfer protocol. The advantage of enabling CoS is that the total cost of ownership (TCO) can be far lower than comparable networks and the individual cost of sending a bit becomes less. By comparison, in an over provisioned network there is minimal congestion but the cost to performance ratio is not maximised. With CoS, application per-formance can be optimised from end-to-end in ALL situations.
Quality of service (QoS) and class of service (CoS) are sometimes used interchangeably. In reality, they are quite different. QoS refers to the ability of network hardware and software to provide selected network traffic with a higher level of service than other traffic. CoS refers to classifying traffic by type of applications or other criteria and then delivering packets by strictly following assigned priorities (i.e. all traffic queued at a higher priority is sent before lower priority traffic is considered for delivery).
There are four parameters used to track and measure QoS: latency, jitter, packet loss and availability. These four parameters can guarantee QoS on a VPN. For example, latency is tolerable for email or Web-based applications, but unacceptable for interactive applications such as voice calls. Jitter, the variance in packet transport delay, may be tolerable for a file transfer but not for interactive or time-sensitive video applications. Packet loss (dropped or lost packets) can leave a Web page still useable without graphics, but could mean your online broker never received your sell order. And availability is the measurement, in percentages, of network uptime on a monthly basis.
How can I ensure that critical enterprise applications receive the highest network priority?
How can I ensure the highest Service Level Agreements for my critical enterprise applications?
Guaranteed level of performance
Infonet Offers a
Unique Approach to
IP VPNs Using the
Application-Defined
Networking Approach
Understand the optimal network architecture required
to execute your strategic business initiatives.
I n f o n e t ’ s I P V P N F a m i l y
Infonet's approach to IP VPNs is to realise that one size does not fit all and to provide VPNs to match the client’s particular business needs. Infonet has defined a CoS that enables clients to run their applications ranging from delay-sensitive, critical to non mission-critical applications on a single, unified private IP multi-protocol label switching (MPLS) network. Infonet can also meet client's needs for non mission-critical uniclass appli-cations VPNs, as well as business partners access to its private networks, using Infonet's extensive tier one public IP network.
Unlike other IP VPN providers, these two networks, in combination with the Internet, means that Infonet can offer the best price to performance ratio and not be limited to either all public or all private solutions. Infonet’s suite of IP-based services for intranet VPNs, remote access VPNs, Internet VPNs and extranet VPNs give multinationals the ability to choose the best mix of reach, performance and security they need to meet their business objectives.
I n f o n e t ’ s A p p l i c a t i o n - D e f i n e d
N e t w o r k i n g A p p r o a c h
Infonet applies its Application-Defined Networking (ADN) and patent-pending Network Analysis Program (NAP) methodology in implementing VPNs. Through the ADN approach, Infonet understands your business strategy and objectives as they relate to your chosen enterprise applica-tions and their performance requirements. We baseline an enterprises’ existing business requirements and network infrastructure to determine the optimal operating condi-tions for its mission-critical, mission-supporting, and non mission-critical applications. Infonet understands your business strategy and objectives as they relate to your
chosen enterprise applications and their performance requirements. Infonet focuses attention on network inten-sive enterprise software, a company’s most strategic IT investment. Infonet’s ADN approach provides
multinationals with recommendations as to the optimal architecture required to execute strategic business initiatives, globalise business operations and maximise ROI on enterprise application deployment.
N e t w o r k A n a l y s i s P r o g r a m
A key element of the ADN approach is Infonet’s NAP. The NAP is a professional service engagement delivered by highly skilled Infonet consultants who analyse the complex interactions between heterogeneous applications running on an enterprise WAN. The NAP details the performance characteristics of applications, protocols and traffic flows in the existing environment — and recommends the optimum network design. The NAP is an invaluable tool when implementing CoS in your corporate network (or IP VPN).
Infonet’s suite of IP-based
services for intranet VPNs,
remote access VPNs, Internet
VPNs and extranet VPNs give
multinationals the ability to
choose the best mix of reach,
performance and security they
need to meet their business
objectives.
I n f o n e t ’ s F l a g s h i p I P V P N S o l u t i o n — I P V P N S e c u r e
Infonet IP VPN Secure runs over a private IP infrastructure and uses MPLS technology to bring a new
level of scalability, security and flexibility to IP VPNs. Infonet IP VPN Secure offers four CoS levels.
These are backed by a set of QoS parameters to support mission-critical and non mission-critical
applications in a secured and prioritised environment. Infonet IP VPN Secure guarantees four
performance parameters (latency, jitter, packet loss and availability) and is backed by aggressive
service level agreements (SLAs).
Infonet’s IP VPN Secure offers the following classes of service and target applications:
Classes of Service Application Types Applications
IP/RealTime Highly sensitive to delay and variation between packets Voice and Video IP/Interactive Mission-critical enterprise applications that are SAP, Oracle, PeopleSoft,
interactive or time dependent Siebel
IP/Lan2Lan Non delay-sensitive applications and general "business class" Lotus Notes, MicroSoft data applications such as client/server technologies, Exchange
Web-based applications
IP/Access Non mission-critical applications such as Internet browsing and FTP, HTTP, email other best-effort applications
I P V P N S e c u r e d e l i v e r s :
>> Added Value Through Application Convergence.
Economies of scale are achieved by the ability to transport multiple applications on a single network. Converging voice and video on a single communication infrastructure dramatically reduces voice and video communication expenses.
>> Simple, Flexible Pricing.
Cost-effective and simple pricing for budget management.
>> Any-to-any Connectivity.
Any-to-any connectivity provides default connections to other business sites without having to purchase connectivity to each site. In comparison, frame relay or ATM VPNs require PVCs to connect each business site in order to communicate.
>> Secure Network Transport.
IP VPN Secure provides an additional layer of security for information transport over a wide area network. As a connectionless network, IP VPN Secure provides security on a VPN basis, offering a comparable level of security and privacy as VPNs built on frame relay or ATM.
>> Greater Flexibility and Scalability.
Adding a new site to Infonet’s IP VPN Secure is as simple as telling the customer premises equipment (CPE) router how to reach the network and configuring the network to recognize VPN membership of the CPE.
>> Ease of Management.
Network management with IP VPN Secure is far easier, faster and less expensive than building a point-to-point network for each new site. For example, adding a new site to a Frame Relay VPN entails updating the traffic matrix, provisioning virtual circuits (VCs) from the new site to all existing sites and reconfiguring each CPE for the
new topology.
>> Cisco Powered Network.
Infonet has successfully attained the Cisco®Powered Network designation. Infonet managed IP services are tested
and implemented over end-to-end hardware and software infrastructure based on Cisco technologies. With Cisco Powered Network accreditation, customers deploying Infonet's managed solution can expect the highest levels of service reliability and performance.
>> Global Award Winning Customer Service.
Infonet has in-country customer service in over 70 countries and territories around the globe. This means Infonet’s multinational clients are supported in their local language and in their own time zone.
>> A Window to the Internet.
Intranet VPN provides secure
connectivity between corporate
sites. They allow businesses to share
resources and information more
efficiently. Intranet VPN is a
tailored virtual networking service
offered over a service provider’s
network. Infonet offers intranet VPNs
built on both the public Infonet IP
backbone and the Infonet Private
IP backbone.
Infonet Services Intranet VPN Benefits
IP VPN Secure
(Private Internet Backbone)
IP VPN Internet
(Infonet’s Public Internet Backbone)
IP VPN OffNet
VoIP OnNet
>> Supports mission-critical applications via four classes of service >> Performance supported by SLAs
>> MPLS ensures high performance
>> Supports any-to-any or hub and spoke configurations >> Ensures high security
>> Provides cost-effective intranet VPN using Infonet’s public Internet backbone >> Secured connections using IPSec and Digital Certificate authentication >> Performance supported by SLAs
>> Provides optimal encryption and firewall security >> Provides ubiquitous global access to applications
>> Offers highly secure access using 3DES encryption and digital certificates >> Easily integrates with FR, ATM and IP VPNs
>> Offers cost-effective international voice calling
>> Provides either an end-to-end managed or unmanaged option >> Performance supported by SLAs
>> Offers easy administration for managed service (complete detail and billing records) >> Supports fax calls
Infonet’s IP VPN Solution. I n t r a n e t V P N Intranet • IP VPN Secure • IP VPN Internet • VoIP OnNet • VoIP OffNet Extranet
• Managed Extranet Service • IP VPN OffNet
IP VPN Security
• Managed Firewall Services • Network Security Service
Remote Access • DialXpress Solutions – Professional – Office – Internet – DualNet – SecurID Application-Defined Networking
• Consultative Application Analysis • Network Analysis Program
Extranet VPNs focus on business-to-business connectivity. MNCs use extranet VPNs to provide
secure and scalable connectivity between different business locations and/or its customers or
suppliers. With an extranet VPN, multinational corporations can create Web portals that provide
secure access to a subset of their network information.
Managed Extranet Service (MES)
IP VPN OffNet
VoIP OffNet
>> End-to-end managed service to corporate applications with policy, security and service levels
>> Remote user access over the Internet
>> Highest levels of security for remote application access without implementing on-site equipment
>> Partners or customers can access the network from unsecured LAN sites and non-company locations
>> Quick extranet deployment leveraging cable or DSL access >> Provides ubiquitous global access to applications
>> Offers highly secure access using 3DES encryption and digital certificates >> Easily integrates with FR, ATM and IP VPNs
>> Offers cost-effective international voice calling >> Easily integrates with FR, ATM and IP VPN
>> Provides easy administration (complete call detail and billing records) >> Supports fax calls
Infonet Services Extranet VPN Features
Security is one of the most critical issues for IP VPNs today. If the greatest strength of the Internet is
its ubiquity, its greatest weakness is its lack of security. Multinationals want to make enterprise
systems and information more available to internal employees as well as business partners and
customers. To ensure the privacy and security for IP VPNs, Infonet offers Managed Firewall Services
(MFS) and Network Security Services (NSS).
Managed Firewall Services
Network Security Services
>> 24/7 Security Administration Team
>> Network-based firewall secures many locations with a single firewall >> Premise-based firewalls provide access control for sites connected
directly to the Internet
>> Value added features include: malicious code disabling, URL filtering, intrusion detection and Web-based reporting
>> Facilitates safe and reliable communication with customers, employees, business partners and suppliers
>> Offers an end-to-end managed solution >> Supports high speed secure LAN access
Infonet Services IP VPN Security Features
Security is one of the most critical issues for IP VPNs today. If the greatest strength of the Internet is
its ubiquity, its greatest weakness is its lack of security. Multinationals want to make enterprise
systems and information more available to internal employees as well as business partners and
customers. To ensure the privacy and security for IP VPNs, Infonet offers Managed Firewall Services
(MFS) and Network Security Services (NSS).
Managed Firewall Services
Network Security Services
>> 24/7 Security Administration Team
>> Network-based firewall secures many locations with a single firewall >> Premise-based firewalls provide access control for sites connected
directly to the Internet
>> Value added features include: malicious code disabling, URL filtering, intrusion detection and Web-based reporting
>> Facilitates safe and reliable communication with customers, employees, business partners and suppliers
Infonet Services IP VPN Security Features
Network Services
Infonet Helps Stratex Networks Globalise Processes
With installations on five continents and across 22 time zones, DMC Stratex Networks, Inc., (Nasdaq:STXN) is one of the world’s foremost solutions providers for mobile applications and broadband wireless access. From manufacturing facilities in California, New Zealand and Scotland to a repair depot in the Philippines, every aspect of Stratex’s business depends on the 24/7 availability of its mission-critical applications.
Stratex Networks needed a communications network that could support the compa-ny’s worldwide sales, order processing, customer service and billing functions. Company management decided to outsource and secure a fully-managed solution. "The nature of our business puts us in areas of the world that have poor telecommunications," remarked B. Lee Jones, vice president of Information Technology and Chief Information Officer for Stratex Networks. "It was imperative for us to partner with a company that not only had an established presence in remote areas, but had built long term relationships. Only Infonet met our criteria."
Additionally, Stratex engaged Infonet to undertake a Network Analysis Program (NAP) to collect, format and analyse the complex interactions between its heterogeneous applications running on its wide area network (WAN) — as well as to access any poten-tial loopholes in either performance or security. The NAP engagement also helped to determine the optimal course for Stratex’s transition from an IP WAN to an IP VPN.
With the conversion to an IP VPN, Stratex was able to double — and in some places triple — its bandwidth, while at the same time cutting its WAN budget in half. "That’s a true measure of value for your dollar," stated Jones. In addition to delivering a measura-ble return on investment, Jones appreciates Infonet’s customer service, its ability to deliver a fully-managed solution and having a single point of contact. "Infonet is a proactive partner — always ready to go the extra mile to meet our needs," Jones observed. Partnering with Infonet has enabled Stratex Networks to globalise its processes, giving all of its locations access to the sales and customer-related information needed to more effectively run its business.
Selecting an
Intelligent IP VPN
Maximises Your
ROI On Enterprise
Applications
Multinational corporations need to be certain that
mission-critical data is reaching its destination and
enterprise applications are meeting business objectives.
A b o u t I n f o n e t
Infonet Services Corporation, known for its quality of service, is a leading provider of value-added global communications services, including IP VPNs, to over 2,600 multinational clients.
Employing a unique consultative approach, Infonet offers integrated solutions optimising the complex relationship between enterprise applications and the global network. Extensive project management capabilities are the foundation for the services and solution offerings (broadband, Internet, intranet, multimedia, remote and local access, provisioning, application and consulting services) positioning Infonet as the ideal single-source partner for multinationals. In particular, Infonet IP VPN solutions offer multinationals a unique combination of Private and Public IP serv-ices as well as a full set of Managed Security Servserv-ices.
Rated "Best in Class" overall in Telemark’s survey of Global Managed Data Network Services, Infonet has also won "Best Customer Care" and "Best Carrier" at the World Communication Awards. Infonet owns and operates The World Network®, accessible from more than 180
coun-tries, and provides local service support in over 70 countries and territories.
Founded in 1970, Infonet's stock is traded on the New York and Frankfurt Stock Exchanges under the symbol IN. Additional information about the company is available at www.infonet.com.
Asia-Pacific 391A Orchard Road #13-08 Ngee Ann City Tower A
Singapore 238873 Tel: +65 838 5215 Fax: +65 734 5223
Europe, Middle East & Africa 350/358 Avenue Louise Box 3 B-1050 Brussels, Belgium Tel: +32 2 627 39 11 Fax: +32 2 640 97 41 Latin America Mardoqueo Fernandez 128 Piso 7
Providencia, Santiago, Chile Tel: +56 2 368 9400 Fax: +56 2 368 9415
North America 2160 East Grand Avenue El Segundo, California 90245-1022 USA Tel: +1 310 335 4700 Fax: +1 310 335 4507
www.infonet.com An ISO Registered Firm
Infonet, DialXpress, Global Connect and The World Network are registered trademarks of Infonet Services Corporation. DialXpressway, PerspeXion and Insight Matters are trademarks of Infonet Services Corporation. SecurID is a registered trademark of RSA Security, Inc. Other product names that may be used herein are for identification purposes only and may be trademarks of their respective companies. Copyright © 2002, Infonet Services Corporation. All rights reserved. Printed in U.S.A. 5M 06/02 AP MP-TB003-01